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SECTION  I 
INTRODUCTION 

The  Interagency  Nuclear  Safety  Review  Panel  (INSRP)  is  tasked  with 
reviewing  the  safety  analyses  of  space  launches  carrying  nuclear  power 
sources.  After  review  of  the  launch  safety  analysis,  the  INSRP  prepares  a 
Safety  Evaluation  Report  (SER)  for  submission  to  the  National  Security 
Council  and  ultimately  to  the  President.  The  SER  contains  a recommendation 
for  launch  approval  or  disapproval. 

These  safety  analyses  are  performed  under  Energy  Research  and  Develop- 
ment Administration  (ERDA)  contract  and  include  inputs  from  many  sources 
including  the  launch  vehicle  contractors.  For  many  years  the  INSRP  has 
accepted  the  booster  vehicle  and  upper  stage  failure  rates  provided  by 
the  contractors  while  wondering  how  these  failure  rates  compare  with  the 
performance  history  of  the  vehicle.  The  Power  Branch,  Nuclear  Systems 
Division  of  the  Air  Force  Weapons  Laboratory  (AFWL)  has  developed  a computer 
code,  LAUNCH,  to  determine  historical  failure  rates  in  an  effort  to  resolve 
the  potential  differences  between  contractor  supplied  and  historical 
failure  rates.  LAUNCH  allows  the  user  to  obtain  the  launch  history,  histori- 
cal failure  rate,  and  projected  reliability  of  specific  launch  vehicles 
using  various  reliability  growth  techniques. 

Preliminary  results  of  LAUNCH  analysis  on  Viking,  Lincoln  Experimental 
Satellites  8 and  9 (LES  8/9),  and  Mariner  Jupiter/Saturn  (MJS)  have  been 
incorporated  into  the  SERs  for  those  launches.  Similar  results  for  other 
launches  and  launch  vehicles  should  prove  useful  to  the  INSRP  in  its  review 

v 

of  safety  analyses. 
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SECTION  II 

COMPUTER  CODE 

The  main  program,  LAUNCH,  is  a short  bookkeeping  program  which  calls 
subroutines  as  directed  by  data  cards  input  to  it.  The  main  program  and 
various  subroutines  will  be  discussed  individually  here.  Listings  of  the 
main  program  and  subroutines  appear  in  the  Appendix.  Formats  for  the  data 
cards  are  discussed  in  Section  V. 

A flowchart  of  LAUNCH  appears  as  figure  1.  The  data  entry  cards  are 
read  into  the  proper  arrays.  An  end-of-file  (EOF)  card  terminates  the 
data  entry  cards.  Subroutine  RENMER  is  called  to  sort  the  data  entries 
chronologically  and  to  merge  them  with  the  main  data  file  which  has  been 
stored  on  tape  or  permanent  file.  The  reordered  and  merged  main  data 
file  is  then  written  onto  tape  or  permanent  file  for  future  use.  Data 
cards  indicating  the  desired  output  information  are  read  next,  and  the 
appropriate  subroutines  are  called.  Another  EOF  card  terminates  the  data 
cards.  This  ends  the  program  execution. 

RENMER  is  flowcharted  in  figure  2.  This  subroutine  uses  a "shell” 
sort  to  chronologically  order  the  data  entries  from  cards.  The  reordered 
set  is  then  written  on  a scratch  file.  This  scratch  file  and  the  main 
data  file  are  then  merged  into  one  single  file  with  any  duplicate  entries 
combined  into  a single  entry.  Duplicate  entries  can  occur  because  informa- 
tion is  obtained  from  a variety  of  sources  and  more  than  one  source  may 
provide  information  on  a given  launch.  Program  control  is  returned  to 
LAUNCH  to  output  the  requested  information  using  this  updated  data  file. 
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Figure  2.  SUBROUTINE  RENMER 
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Subroutine  CHANGE  appears  in  figure  3 in  flowchart  form.  CHANGE  uses 
a dummy  variable  as  a temporary  storage  location  for  switching  the  items  in 


the  data  entries. 

A flowchart  of  VEHICLE  appears  as  figure  4.  This  subroutine  takes  the 
data  entries  which  contain  the  desired  output  information  from  the  main 
data  file  and  enters  them  into  a vehicle  array.  Data  entries  are  tested 
to  determine  if  they  contain  the  desired  vehicle  and,  if  only  failures  are 
desired,  if  the  launch  result  is  a failure.  The  vehicle  array  is  then 
printed  for  use. 

Subroutine  FAILRAT  is  flowcharted  in  figure  5.  Using  success  and 
failure  counters,  FAILRAT  determines  the  historical  reliability  after  each 
launch.  This  can  be  done  using  all  launches  or  for  only  the  last  NO 
launches,  where  NO  is  supplied  by  the  user.  A success  is  the  successful 
performance  of  the  desired  vehicle;  a failure  of  a booster  vehicle  is  a 
no-test  for  the  upper  stage  if  the  upper  stage  is  the  desired  vehicle. 

Figure  6 is  a flowchart  of  FAILLOC.  This  subroutine  determines  the 
percentage  of  failures  occurring  during  each  launch  phase:  pad,  land, 
ascent,  orbital.  These  percentages  can  be  for  all  launches  or  for  only 
the  last  NO  launches  where  NO  is  input  by  the  user. 

A flowchart  of  CURVIT  appears  as  figure  7.  CURVIT  uses  a least-squares 
nonlinear  regression  subroutine  to  determine  a best  fit  to  the  historical 
data.  Four  general  equations  are  currently  employed  (Y  = reliability; 

X = launch  number;  A,  B,  C = curve  fit  parameters): 


Y * A + Becx 

(1) 

Y = AeBeCX 

(2) 

v ■ * 0 - nV  ) 

(3) 

Y = AeB/x 

(4) 

1 
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SECTION  III 

SOURCES  OF  INFORMATION 


The  information  used  to  build  the  data  file  comes  from  a variety  of 
sources.  The  original  starting  point  was  the  TRW  Space  Log  (reference  2). 
This  provided  basic  information  on  launches  including  date,  vehicle, 
project  director,  and  mission  success  or  failure.  Another  major  source 
was  NASA  Pocket  Statistics  (reference  3}  which  provided  the  same  type  of 
information  on  NASA  missions.  Vandenberg  AFB  Launch  Summary  (reference  4) 
yielded  additional  data  on  many  boosters  which  have  been  used  as  reentry 
vehicles  rather  than  space  launches.  In  instances  where  it  was  available, 
contractor  information  on  launch  vehicles  was  also  included  (reference  5,  6). 
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SECTION  IV 


COMPUTER  DECK  STRUCTURE 

The  program  LAUNCH  is  written  in  ANSI  standard  FORTRAN  and  requires  the 
appropriate  control  cards.  Different  parts  of  the  card  deck  are  separated 
by  end-of-file  (EOF)  cards  (also  called  end-of-section  or  end-of-partition). 
Figure  8 depicts  the  deck  structure. 

The  control  cards  must  request  the  storage  device  for  the  main  data 
file  to  read  and  update  the  file.  They  also  establish  the  language  used 
and  other  peripheral  equipment  desired. 

The  main  program  and  associated  subroutines  follow.  Data  entry  cards 
$re  next  and  may  be  in  any  order. 

The  data  output  cards  must  be  somewhat  organized.  First,  the  vehicle 
array  must  be  formed  (KEY  = 0).  Then  any  statistics  desired  may  be 
determined  using  that  array.  If  statistics  on  another  vehicle  are  desired, 
the  vehicle  array  for  that  vehicle  must  be  formed  first.  Any  number  of 
vehicles  can  be  examined  sequentially  during  a computer  run  but  only 
three  booster  and  upper  stages  can  be  examined  at  one  time.  An  EOF  card 
terminates  the  computer  run. 


SECTION  V 


DATA  CARD  FORMAT 


Data  cards  are  of  two  types:  data  entries  and  data  output.  Additional 
information  on  launches  is  entered  on  data  entry  cards.  The  type  of  output 
desired  is  coded  on  data  output  cards. 

Data  entry  cards  have  the  following  format: 

Col  1-6  Launch  date  as  an  integer=year,  month,  day 
Col  7-8  Booster  vehicle  designator  as  an  integer 


01=Thor 


02=Atlas 


03=Scout 


05=Ti tan  III 

07=Redstone 

09=Saturn 


04=Titan  II 


06=Vanguard 
08=Juno  II 
10=Jupiter 


ll=Titan  III  (w/solid  strapons)  12=Titan  I 
20=Unknown 


Col  9-10  Upper  stage  designator  as  an  integer 


01=Agena 
03=Able 
05=Burner  II 
10=None 


02=Centaur 

04=Delta 

06=Transtage 

20=Unknown 


Col  11-14  Project  director  as  an  alphanumeric  (e.g.,  USAF,  NASA,  USN) 
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Col  15  Source  of  information  as  an  alphanumeric 

B=Booster  Contractor 
E=Air  Force  Eastern  Test  Range  (AFETR) 

N=NASA  Pocket  Statistics 
0=0ther 

T=TRW  Space! og 
U=Upper  Stage  Contractor 

W=Western  Test  Range  at  Vandenberg  Air  Force  Base  (VAFB) 


Col  16 


Launch  result  as  an  alphanumeric 
F=Failure 


S=Success 


Col  17  Failure  phase  as  an  alphanumeric 

A=Ascent 
L=Land 
0=0rbital 
P=Pad 


Col  18 


Failed  stage  as  an  alphanumeric 
B=Booster  Vehicle 
U=Upper  Stage 


Col  19 


Type  of  launch  as  an  integer 

1=$pace  Launch 

2=Training 

3=Test 


J 
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4=Reentry  Test  Vehicle 

5=Suborbital 

6=Unknown 

Col  20  Multiple  launch  indicator  as  an  integer 

0=First  launch  of  given  vehicle  on  that  date 
l=0ne  multiple  launch  of  vehicle  on  that  date 

The  sample  data  entry  card  in  Figure  9 adds  a launch  of  a Thor  Delta 
spacecraft  combination  on  13  May  1960  to  the  main  data  file.  The  launch 
was  a NASA  space  launch  which  failed  during  ascent  due  to  an  upper  state 
failure.  Information  is  available  from  Thor  contractor. 

Data  output  cards  have  the  following  format: 

Col  1-2  Output  key  as  an  integer 

Negative=Automatic  call  sequence  to  output  complete 
statistics  on  desired  launch  vehicle  (this 
does  not  form  vehicle  array) 

0=Vehicle  history  output  (this  must  be  done  before 
statistics  are  requested  because  the  statistics  are 
derived  from  the  vehicle  array) 
l=Failure  rate  statistics 
2=Failure  location  statistics 

50=Curve  fit  of  data  using  forms  as  requested  in  Cols.  21-24 

Col  3-4  Booster  vehicle  designator  (see  data  entry  card  Col  7-8)  - 
If  zero,  any  booster  may  be  considered. 
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Figure  9.  DATA  ENTRY  CARD 
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Figure  10.  DATA  OUTPUT  CARD 
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Col  5-6 


Upper  stage  designator  (see  data  entry  card  Col  9-10) 


i 


I 


If  zero,  any  upper  stage  may  be  considered. 

Col  7-10  Percentage  of  launches  to  be  used  in  deriving  statistics 
(zero  causes  all  launches  to  be  considered,  negative 
number  causes  a summary  only  to  be  printed). 

Col  11  Blank 

Col  12  Launch  result  to  be  considered 

F=Failures  only 
S=A11  launches 

Col  13-14, 

17-18  Additional  booster  vehicle  designators 

Col  15-16, 

19-20  Additional  upper  stage  designators 

Col  21-24  Curve-fit  forms  indicators 

Col  21=1  fit  to  A+Becx 

Col  22=1  fit  to  AeBeCX 

Col  23=1  fit  to  A (1  - ) 

Col  24=1  fit  to  AeB/x 

The  sample  data  output  card  in  figure  10  requests  the  vehicle  history 
(failures  only)  for  the  Thor  Agena  spacecraft  combination. 
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SECTION  VI 

SAMPLE  OUTPUT 

Figures  II  to  15  show  the  output  generated  by  LAUNCH.  A discussion 
of  each  figure  will  demonstrate  its  features  and  uses.  The  Centaur  upper 
stage  will  be  used  as  an  example. 

Figures  11  and  12  are  representative  of  the  output  from  subroutine 
VEHICLE.  The  output  is  labeled  for  the  vehicle  being  considered  and  for 
failures  only  or  all  launches.  The  columns  are  basically  self-explanatory. 
Abbreviations  for  the  source  of  information  are: 

TRW  - TRW  Space  Log 

NASA  - NASA  Pocket  Statistics 

BV  - Booster  vehicle  contractor 

UV  - Upper  stage  contractor 

ETR  - Air  Force  Eastern  Test  Range 

WTR  - Western  Test  Range  (Vandenberg  Air  Force  Base) 

OTHER  - Other  sources 

The  launch  types  are: 

SPACE  - Orbital  flight  or  space  probe 

TRNG  - Training  (these  are  boosters  only  in  general) 

TEST  - Vehicle  test 

RTV  - Reentry  test  vehicle 

SUBORB  - Suborbital  flight 
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Figure  II  Output  from  Subroutine  VEHICLE  (Failures  Only) 
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Failure  locations  used  are: 

P - Failure  occurred  on  launch  pad  or  resulted  in  a pad  impact 
L - Failure  occurred  over  land 

A - Failure  occurred  during  ascent  over  water  before  achieving  orbit 
0 - Failure  occurred  in  orbital  phase 

Note  that  the  failures  in  figure  11  are  only  Centaur  failures;  the  booster 
failure  is  not  listed.  The  launches  are  listed  in  chronological  order  and 
show  the  basic  information  at  a glance.  If  more  detailed  information  is 
desired,  it  can  be  obtained  from  one  of  the  sources  marked  with  an  "X". 

Figure  13  is  a sample  output  from  subroutine  FAILRAT.  The  columns  are 
self-explanatory.  Note  that  the  failure  of  the  booster  does  not  affect  the 
success  ratio  of  the  upper  stage. 

The  percentages  of  failures  during  the  various  launch  phase  are  shown 
in  figure  14.  If  the  phase  of  failure  is  not  known,  that  failure  is  not 
considered  in  determining  the  percentages. 

Figure  15  shows  the  output  of  subroutine  CDRVIT,  the  reliability 
growth  curve-fitting  subprogram.  The  equations  can  be  plotted  as  in 
figure  16  with  the  historical  data  to  graphically  show  the  trends  for  the 
vehicle  being  considered. 
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CENTAUR  GDC 


Adjusted  Cumulative  Success/Failure  Ratio  for  Last  33  Flights  of  a Total  of  41. 


LAUNCH  NUMBER 

RESULT 

STAGE 

TOTALS 

PERCENT 

S 

F 

1 

F 

U 

0 

1 

0.00 

2 

S 

1 

1 

50.00 

3 

F 

U 

1 

2 

33.33 

4 

F 

U 

1 

3 

25.00 

5 

F 

B 

1 

3 

25.00 

6 

S 

2 

3 

40.00 

7 

S 

3 

3 

50.00 

8 

S 

4 

3 

57.14 

9 

S 

5 

3 

62.50 

10 

S 

6 

3 

66.67 

11 

S 

7 

3 

70.00 

12 

S 

8 

3 

72.73 

13 

S 

9 

3 

75.00 

14 

S 

10 

3 

76.92 

15 

S 

11 

3 

78.57 

16 

S 

12 

3 

80.00 

17 

S 

13 

3 

81.25 

18 

s 

14 

3 

82.35 

19 

s 

15 

3 

83.33 

20 

s 

16 

3 

84.21 

21 

F 

U 

16 

4 

80.00 

22 

S 

17 

4 

80.95 

23 

F 

U 

17 

5 

77.27 

24 

S 

18 

5 

78.26 

25 

S 

19 

5 

79.17 

26 

s 

20 

5 

80.00 

27 

s 

21 

5 

80.77 

28 

s 

22 

5 

81.48 

29 

s 

23 

5 

82.14 

30 

s 

24 

5 

82.76 

31 

s 

25 

5 

83.33 

32 

s 

26 

5 

83.87 

33 

F 

U 

26 

6 

81.25 

34 

S 

27 

5 

84.38 

35 

S 

27 

5 

84.38 

36 

S 

28 

4 

87.50 

37 

s 

29 

3 

90.63 

38 

s 

30 

3 

90.91 

39 

s 

30 

3 

90.91 

40 

s 

30 

3 

90.91 

41 

s 

30 

3 

90.91 

Figure  13  Output  from  Subroutine  FAILRAT  (Chronological) 
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CENTAUR  GDC 


Adjusted  Failures  Classed  by  Location  for  Last  33  Flights  of  a Total  of  41. 


LOCATION 

FAILURES 

PERCENT 

Pad 

0 

0.00 

Land 

0 

0.00 

Ascent 

2 

66.67 

Orbital 

1 

33.33 

Total 

3 

100.00 

Figure  14  Output  from  Subroutine  FAILRAT  (Sunmary) 
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The  curve  fit  for  this  data  is  of  the  form: 

Reliability  = A * EXP(8  * EXP(C  * Launch  Number)) 

With  the  Parameters  A,  B,  C as  follows: 

A = . 8099545744E+00 
B = -.8207599285E+00 
C = -.9104745067E+00 

The  curve  fit  for  this  data  is  of  the  form: 

Reliability  = A * (1  - B/(C  * Launch  Number  + B)) 

With  the  Parameters  A,  B,  C as  follows: 

A = . 876441 1049E+00 

B = .2880982693E+15 

C = .2880982693E+15 

I 

The  curve  fit  for  this  data  is  of  the  form: 

Reliability  = A + B * EXP(C  * Launch  Number) 

With  the  Parameters  A,  B,  C as  follows: 

A = .81 99671 974E+00 

B = 29891 72644E+00 

C = - . 4309589840E+00 

The  curve  fit  for  this  data  is  of  the  form: 

Reliability  * A * EXP(B/Launch  Number) 

With  the  Parameters  A,  B as  follows: 

A = . 83287331 28E+00 

B = -.364281 921 0E+00 


Figure  15.  Output  from  Subroutine  CURVTT 
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RELIABILITY  CENTRUR 

I.UBr 


SECTION  VII 
RESULTS 

LAUNCH  has  been  used  to  provide  preliminary  results  for  use  with 
the  safety  analyses  of  the  Viking,  LES  8/9,  and  MJS  missions.  These 
results  give  a historical  reliability  which  is  used  to  scale  the  failure 
probabilities  originated  by  the  analyses. 

The  booster  vehicle  for  all  three  missions  is  the  Titan  III  with 
strap-on  solid  rocket  motors.  This  vehicle  has  had  32  flights  and  32 
successes.  Therefore,  it  is  considered  very  reliable,  and  the  manufacturer's 
failure  probability  of  98%  could  be  used  directly. 

The  Viking  and  MJS  missions  use  a Centaur  upper  stage.  From  Jan  1968 
to  Jun  1974,  there  were  21  launches  with  19  successes  which  is  a reliability 
of  90.48%.  This  is  lower  than  the  manufacturer's  reliability,  and  some 
scaling  was  done  to  reconcile  the  numbers. 

LES  8/9  uses  a Transtage  upper  stage.  From  Jan  1968  to  Jun  1974,  there 
were  12  launches  with  11  successes  which  is  a reliability  of  91.67%. 

This  is  also  lower  than  the  manufacturer's  reliability,  and  scaling  was 
done  before  the  reliabilities  were  utilized. 

Another  consideration  is  the  apportionment  of  failure  probabilities 
to  the  launch  phases.  If  all  launch  vehicles  are  considered,  these 
figures  are: 

Pad  5% 

Land  5% 

Ascent  63% 

Orbital  27% 
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All  launches  were  considered  because  there  have  not  been  sufficient 
failures  of  any  particular  vehicle  to  accurately  predict  these  percentages. 

As  information  is  gathered,  more  accurate  results  will  be  obtained 
from  LAUNCH.  These  results  should  prove  useful  to  the  INSRP  review  of 
nuclear  power  source  launches. 
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APPENDIX 

LISTING  OF  LAUNCH 

The  following  listing  of  LAUNCH  and  its  subroutines  is  provided 
for  the  reader  who  is  interested  in  the  details  of  the  program  logic. 
Comments  are  included  to  explain  the  workings  of  the  program  and  to 
separate  it  into  logical  units. 
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VARIABLES  USED  IN  LAUNCH 


ABSERR  - Absolute  error  tolerance  for  parameter  convergence 
ALN  - Number  of  data  entries  loaded  in  the  vehicle  array  after  processing 
by  VEHICLE 

ARAT  - Percentage  of  failures  occurring  during  ascent 
BCONT  - Name  of  booster  vehicle  contractor 
BOOST  - Booster  designator 

BV,  BV1,  8V2  - Booster  designators  for  requesting  output  information 
BVEH  - Name  of  booster  vehicle 

Cl,  C2,  C3,  C4  - Designators  for  curve  fit  equations 

DERIV1,  DERIV2,  DERIV3,  DERIV4  - Subroutines  defining  first  and  second 

partial  derivatives  of  the  fit  expression 
with  respect  to  the  parameters  at  each  of 
the  data  points. 

DERIV  - Dummy  name  in  FITIT  and  FITI  to  call  desired  partial  derivative 
subroutine 

FA  - Ascent  failure  counter 


FAIL  - Total  failure  counter 
FL  - Land  failure  counter 
FO  - Orbital  failure  counter 
FP  - Pad  failure  counter 
HEAD  - Page  heading  array 

ID1,  ID2,  ID3  - Launch  date  separated  into  month,  day,  year  for  printing 
output 


IDATE  - Launch  date 
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IFLAG  - Duplicate  file  indicator  in  RENMER;  Error  indication  flag  in  CURVIT 
IN  - File  designator 
10  - File  designator 

KEY  - Output  request  parameter  indicating  desired  output  subroutines 
IATYP  - Launch  type  nomenclature 
LOC  - Phase  of  failure 

LRAT  - Percentage  of  failures  occurring  over  land 
LTYP  - Launch  type  designator 
MULTLA  - Multiple  launch  indicator 

NDATA  - Number  of  data  points  in  the  X and  Y arrays  to  be  fit 
NEWDAT  - Number  of  data  entry  cards  read 

NO  - Percentage  of  launches  to  be  considered  in  output  subroutines 

NO!  - Number  of  launches  to  be  considered  in  output  subroutines 

NPAR  - Number  of  parameters  in  the  PAR  array 

ORAT  - Percentage  of  failures  occurring  during  orbital  phase 

ORGDAT  - Number  of  data  entries  in  updated  main  data  file 

PAR  - Parameter  values 

PF  - First  partial  derivative  array 

PPF  - Second  partial  derivative  array 

PRAT  - Percentage  of  failures  occurring  on  the  launch  pad 

PRODIR  - Project  director  name 

R - Residual  value 

RAT  - Success  ratio 

RELERR  - Relative  error  tolerance  for  parameter  convergence 
RES  - Launch  result 

RESU  - Launch  result  designator  for  use  in  output  subroutines 
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SCR  - Dummy  variable  used  for  switching  data  entries 

SOUR  - Source  of  information  designator  as  indicated  on  data  entry  cards 

ST  - Source  of  information  designator  as  stored  in  main  data  file 

STG  - Failed  stage  designator 

SUCC  - Success  Counter 

THE0R1 , THE0R2,  THE0R3,  THE0R4  - Subroutines  defining  the  theoretical  fit 

values  at  given  X values 

THEORY  - Dummy  name  in  FITIT  and  FITI  to  call  desired  fit  subroutine 
UCONT  - Name  of  upper  stage  contractor 
UPPER  - Upper  stage  designator 

UV,  UV1 , UV2  - Upper  stage  designators  for  requesting  output  information 

UVEH  - Name  of  upper  stage 

WF  - Weighting  factors  for  curve  fit  data 

WORK  - Dummy  work  array 

X - Abscissa  data  variables  (launch  number) 

Y - Ordinate  data  variables  (historical  reliability) 


All  other  variables  are  dummy  variables. 
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ABBREVIATIONS 

Air  Force  Eastern  Test  Range 

Air  Force  Weapons  Laboratory 

American  National  Standards  Institute,  Inc. 

Advanced  Research  Projects  Agency 

Department  of  Defense 

End-of-File 

Energy  Research  and  Development  Administration 
Interagency  Nuclear  Safety  Review  Panel 
Lincoln  Experimental  Satellites  8 and  9 
Mariner  Jupiter/Saturn 

National  Aeronautics  and  Space  Administration 
Safety  Evaluation  Report 
Vandenberg  Air  Force  Base 


AFETR 

AFWL 

ANSI 

ARPA 

DOD 

EOF 

ERDA 

INSRP 

LES  8/9 

MJS 

NASA 

SER 

VAFB 
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